Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File:                     NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier:          142vRPjQ9mbB6PT3AwhZzXZfkA9ia9Qzy1xoAjrGjmk=
Subject key identifier:   15:56:BE:E3:60:C6:DF:6F:EF:14:FA:8D:96:37:41:CB:00:29:BB:FD
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer:       /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial:       01974EC55EAA3A018D6936F2E5E5CFF3E7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number:          04DB
Signing time:             Sun 08 Jun 2025 09:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:47 +0000
Files and hashes:         1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
                          2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: NDC0fW1dmmSR3AchByo1vA2fi9lbdlS9jcJA1RBmDIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:5e:aa:3a:01:8d:69:36:f2:e5:e5:cf:f3:e7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
        Validity
            Not Before: Jun  8 09:00:47 2025 GMT
            Not After : Jun  9 09:00:47 2025 GMT
        Subject: CN=1556bee360c6df6fef14fa8d963741cb0029bbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:f7:2d:b7:7c:33:a3:ad:19:5a:00:fc:70:
                    2b:95:df:8d:5a:2b:77:79:6c:94:bb:57:1e:c2:b1:
                    9c:e0:27:71:de:cc:23:71:7a:f5:57:c8:2b:7d:83:
                    4e:09:d5:3a:8b:9b:43:ad:4a:7a:76:a9:63:aa:09:
                    3d:66:42:ee:ce:62:84:44:ca:a7:2d:f0:66:04:b8:
                    d4:8c:4c:c1:4a:38:33:3c:80:4f:8d:26:93:37:fa:
                    9e:69:15:b6:85:34:a4:7c:43:2e:af:0b:31:0d:62:
                    01:2d:b4:f5:0e:a9:d6:15:d3:ae:bb:a8:19:9a:2c:
                    ce:d2:2e:14:6a:98:df:d8:82:c6:f9:e6:c2:8d:e7:
                    20:fa:26:43:1a:24:b1:df:d0:6c:71:fe:a6:18:b6:
                    1a:04:a5:78:da:7e:18:3c:c9:f7:52:aa:d1:1e:8f:
                    6d:19:b0:8e:58:ca:77:d6:07:75:93:64:75:68:ed:
                    cc:4c:9c:1b:25:99:eb:1f:dc:81:d5:28:82:b8:f2:
                    d5:32:0e:1e:29:e0:42:a6:4a:6d:61:3a:01:d4:fd:
                    56:60:9a:2e:5b:39:b4:bb:e1:e8:bd:15:59:9a:58:
                    ed:c1:61:5d:27:1d:58:20:eb:6a:27:9f:8a:03:46:
                    46:0e:a0:ca:ec:e6:86:e6:6f:e9:a1:89:d8:18:cb:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:BE:E3:60:C6:DF:6F:EF:14:FA:8D:96:37:41:CB:00:29:BB:FD
            X509v3 Authority Key Identifier:
                keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:49:07:40:a4:a0:b0:a2:e2:e9:9d:cf:16:35:46:d2:30:
         ce:a5:d6:78:ba:29:28:e9:f3:f8:6e:05:c8:86:f8:fb:ee:e1:
         3a:59:02:c0:84:2f:77:24:9e:5a:fc:0e:c8:a1:2b:0f:c9:5f:
         c1:8c:aa:17:65:f1:f0:a6:32:4a:8c:42:89:28:0a:cf:20:63:
         7f:6e:f3:81:5c:b9:c9:73:3e:9b:a5:d4:a4:46:99:98:5c:eb:
         13:c9:a3:c8:62:41:e3:b0:e7:92:11:d3:c1:b4:21:59:fb:80:
         cd:a2:88:60:89:ea:59:88:b1:f4:3d:ab:00:81:44:5f:fa:be:
         d3:56:9b:91:f0:66:a7:02:aa:11:e3:e6:3d:a0:d7:d4:58:cf:
         f7:0c:24:d0:42:7b:2d:7a:a8:93:68:40:39:ca:f0:76:80:19:
         c5:65:4d:cc:d0:0c:b0:e7:57:e4:ac:ec:33:8e:15:cb:b8:b1:
         3f:4f:ab:56:e8:5e:24:9d:af:96:ba:b9:08:3c:1c:c5:00:5d:
         0e:0b:99:86:ee:97:cf:5f:c3:45:79:fe:db:2d:f0:b6:be:23:
         86:9c:a1:70:32:a9:dd:04:33:bb:23:28:85:ae:6f:a8:06:da:
         4e:25:ae:6c:a1:91:e1:d3:20:0b:74:71:45:6c:0c:d2:2a:db:
         98:3a:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:03 2025 by rpki-client